The package is small and clearly documented, with tests, a matching MIT license, and no install-time scripts. Its single-maintainer project has had no commits or releases since January 2021, and it has no security policy or scanning tools.
58%
Total Score
38
100
78
83
There were zero commits and zero active maintainers in the last three months, consistent with the release history indicating that development stopped years ago.
Only one registry account has publish access. That is a limited publishing base for a user-owned project and increases continuity risk if the maintainer becomes unavailable.
The registry namespace and repository belong to the same individual account, confirming ownership alignment but providing no organizational backing to offset the single-maintainer risk.
Only two releases exist, with the latest in January 2021 and none in the last 12 months. This long release silence lowers confidence in ongoing maintenance.
There are no open issues or pull requests and no recent issue or pull-request activity. This is neutral for a small package, but it also shows no visible recent community engagement.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.31 | — | — |
monolog/monolog Version ^2.0 | — | — |
illuminate/support Version ^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.